mirror of
https://github.com/TracksApp/tracks.git
synced 2026-03-01 02:20:16 +01:00
5b431ef50a
This is at least one issue with this
to logout of CAS you need session information but the logout method blows this away so I do the cas log out before the session is killed so the session persistest in rails. Because I needed to move the CAS before filters into login_cas and out of the application to make it work side by side. The user will still be logined into tracks even though their CAS session is closed as the session will still be there.
def logout
@user.forget_me if logged_in?
cookies.delete :auth_token
session['user_id'] = nil
if ( SITE_CONFIG['authentication_schemes'].include? 'cas') && session[:cas_user]
CASClient::Frameworks::Rails::Filter.logout(self)
else
reset_session
notify :notice, "You have been logged out of Tracks."
redirect_to_login
end
end
The other issue I have with this is that:
I could not find a use case for having mixed auth when using CAS. The reason to move to CAS is that all your users use CAS all the time. Even for admin accounts. Moodle is a good example of this in that when you activate CAS the default is that you can now only access moodle via CAS. By allowing mixed auth and self signup you end up with a anyone (the public) being able to sign up for accounts.
114 lines
6 KiB
Text
114 lines
6 KiB
Text
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
|
<html xmlns="http://www.w3.org/1999/xhtml">
|
|
<head>
|
|
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
|
|
<% if @prefs.refresh != 0 -%>
|
|
<meta http-equiv="Refresh" content="<%= @prefs["refresh"].to_i*60 %>;url=<%= request.request_uri %>">
|
|
<% end -%>
|
|
<% bundle :name => "tracks_css" do %>
|
|
<%= stylesheet_link_tag *%w[ standard superfish niftyCorners jquery-ui jquery.autocomplete] %>
|
|
<% end %>
|
|
<%= stylesheet_link_tag "print", :media => "print" %>
|
|
<% bundle :name => "jquery" do %>
|
|
<%= javascript_include_tag 'jquery' %>
|
|
<%= javascript_include_tag 'jquery-ui' %>
|
|
<%= javascript_include_tag 'jquery.cookie' %>
|
|
<%= javascript_include_tag 'jquery.blockUI' %>
|
|
<%= javascript_include_tag 'jquery.jeditable' %>
|
|
<%= javascript_include_tag 'jquery.autocomplete' %>
|
|
<% end %>
|
|
<% bundle :name => "tracks_js" do %>
|
|
<%= javascript_include_tag *%w[
|
|
hoverIntent superfish application
|
|
accesskey-hints niftycube flashobject ] %>
|
|
<% end %>
|
|
<%= javascript_tag "var AUTH_TOKEN = #{form_authenticity_token.inspect};" if protect_against_forgery? %>
|
|
<%= javascript_tag "var SOURCE_VIEW = '#{@source_view}';" %>
|
|
<%= javascript_tag "var TAG_NAME = '#{@tag_name}';" if @tag_name %>
|
|
<script type="text/javascript">
|
|
<% if defined? context_names_for_autocomplete -%>
|
|
var contextNames = <%= context_names_for_autocomplete %>;
|
|
var projectNames = <%= project_names_for_autocomplete %>;
|
|
var defaultContexts = <%= default_contexts_for_autocomplete %>;
|
|
var defaultTags = <%= default_tags_for_autocomplete %>;
|
|
var tagNames = <%= tag_names_for_autocomplete %>;
|
|
var dateFormat = '<%= date_format_for_date_picker %>';
|
|
<% end -%>
|
|
</script>
|
|
<link rel="shortcut icon" href="<%= url_for(:controller => 'favicon.ico') %>" />
|
|
<%= auto_discovery_link_tag(:rss, {:controller => "todos", :action => "index", :format => 'rss', :token => "#{current_user.token}"}, {:title => "RSS feed of next actions"}) %>
|
|
<link rel="search" type="application/opensearchdescription+xml" title="Tracks" href="<%= search_plugin_path %>" />
|
|
<title><%= @page_title %></title>
|
|
</head>
|
|
|
|
<body class="<%= @controller.controller_name %>">
|
|
<div id="topbar">
|
|
<div id="date">
|
|
<h1>
|
|
<% if @count -%>
|
|
<span id="badge_count" class="badge"><%= @count %></span>
|
|
<% end -%>
|
|
<%= current_user.time.strftime(@prefs.title_date_format) %>
|
|
</h1>
|
|
</div>
|
|
<div id="minilinks">
|
|
<%= link_to("Toggle notes", "#", {:accesskey => "S", :title => "Toggle all notes", :id => "toggle-notes-nav"}) %>
|
|
|
|
|
<%= link_to "Logout (#{current_user.display_name}) »", logout_path %> <p>cas user<%=session[:cas_user]%></p></p>
|
|
</div>
|
|
<div id="navcontainer">
|
|
<ul class="sf-menu">
|
|
<li><%= navigation_link("Home", home_path, {:accesskey => "t", :title => "Home"} ) %></li>
|
|
<li><%= navigation_link("Starred", tag_path("starred"), :title => "See your starred actions" ) %></li>
|
|
<li><%= navigation_link("Projects", projects_path, {:accesskey=>"p", :title=>"Projects"} ) %></li>
|
|
<li><%= navigation_link("Tickler", tickler_path, {:accesskey =>"k", :title => "Tickler"} ) %></li>
|
|
<li><a href="#">Organize</a>
|
|
<ul>
|
|
<li><%= navigation_link( "Contexts", contexts_path, {:accesskey=>"c", :title=>"Contexts"} ) %></li>
|
|
<li><%= navigation_link( "Notes", notes_path, {:accesskey => "o", :title => "Show all notes"} ) %></li>
|
|
<li><%= navigation_link( "Repeating todos", {:controller => "recurring_todos", :action => "index"}, :title => "Manage recurring actions" ) %></li>
|
|
</ul>
|
|
</li>
|
|
<li><a href="#">View</a>
|
|
<ul>
|
|
<li><%= navigation_link( "Calendar", calendar_path, :title => "Calendar of due actions" ) %></li>
|
|
<li><%= navigation_link( "Done", done_path, {:accesskey=>"d", :title=>"Completed"} ) %></li>
|
|
<li><%= navigation_link( "Feeds", {:controller => "feedlist", :action => "index"}, :title => "See a list of available feeds" ) %></li>
|
|
<li><%= navigation_link( "Statistics", {:controller => "stats", :action => "index"}, :title => "See your statistics" ) %></li>
|
|
</ul>
|
|
</li>
|
|
<li><a href="#">Admin</a>
|
|
<ul>
|
|
<li><%= navigation_link( "Preferences", preferences_path, {:accesskey => "u", :title => "Show my preferences"} ) %></li>
|
|
<li><%= navigation_link( "Export", {:controller => "data", :action => "index"}, {:accesskey => "i", :title => "Import and export data"} ) %></li>
|
|
<% if current_user.is_admin? -%>
|
|
<li><%= navigation_link("Manage users", users_path, {:accesskey => "a", :title => "Add or delete users"} ) %></li>
|
|
<% end -%>
|
|
</ul>
|
|
</li>
|
|
<li><a href="#">?</a>
|
|
<ul>
|
|
<li><%= link_to 'Integrate Tracks', integrations_path %></li>
|
|
<li><%= link_to 'REST API Docs', url_for(:controller => 'integrations', :action => 'rest_api') %></li>
|
|
</ul>
|
|
</li>
|
|
<li><%= navigation_link(image_tag("system-search.png", :size => "16X16", :border => 0), {:controller => "search", :action => "index"}, :title => "Search All Items" ) %></li>
|
|
</ul>
|
|
</div>
|
|
<%= render_flash %>
|
|
</div>
|
|
|
|
<div id="content" class="<%= @controller.controller_name %>">
|
|
<% unless @controller_name == 'feed' or session['noexpiry'] == "on" -%>
|
|
<%= periodically_call_remote( :url => {:controller => "login", :action => "check_expiry"},
|
|
:frequency => (5*60)) %>
|
|
<% end -%>
|
|
<%= periodically_call_remote( :url => check_deferred_todos_path(:format => 'js'),
|
|
:method => :post,
|
|
:frequency => (10*60)) %>
|
|
<%= yield %>
|
|
</div>
|
|
|
|
<%= render :partial => "shared/footer" %>
|
|
</body>
|
|
</html>
|